Pro-Iranian hackers stole data from UN atomic agency’s server

Hackers threatened to expose physicists, others who worked with IAEA.

The United Nations' International Atomic Energy Agency has admitted that data from a retired server at its Vienna headquarters was stolen and posted to a hacker website. A group calling itself Parastoo allegedly stole the data in an effort to draw attention to Israel's nuclear weapons program and as a protest against attacks on Iran's nuclear efforts—including the use of the Stuxnet worm and assassinations of Iranian nuclear researchers.

A Pastebin posting on November 25 by someone purporting to represent the group (which takes its name from the Farsi name for the swallow) listed the e-mail addresses of physicists and other experts that had consulted with the IAEA. The message urged the people whose addresses were listed to petition the IAEA to investigate "activities at Dimona"—the site of Israel's Negev Nuclear Research Center, which is widely believed to be the center of Israel's nuclear weapons production efforts.

"We would like to assert that we have evidences [sic] showing there are beyond-harmful operations taking place at this site and the above list who technically help IAEA could be considered a partner in crime should an accident happen there," the statement read.

The group also said it would publish the addresses and professional details of all of the individuals listed, and it made vague threats against them if there was further violence against Iranian nuclear researchers—"if a Western-favored element entertains another sip of motorbike & magnetbomb cocktail. You are not anonymous," the poster said. "Expect us."

IAEA spokeswoman Gill Tudor told Reuters' Fredrik Dahl that the server the data was stolen from was "an old server that was shut down some time ago," and that the agency regretted the breach. "The IAEA's technical and security teams are continuing to analyze the situation and do everything possible to help ensure that no further information is vulnerable," Tudor said.

IAEA must not have heard that it is common practice to physically destroy decommissioned hardware containing classified information. No, let's just dump our nuclear secrets in the trash for the dumpster divers...

Call me old fashioned, but when I "retire" any work PC or server, it's gets unplugged, cannabalized for parts, and the HDD's get a little workout with a 12 ton hydraulic press fitted with a pointed anvil tool.

You would think the IAEA would have a really paranoid, creepy IT specialist that literally sleeps in a cot next to the servers to keep unsavory characters away rather than leaving servers run unsecured on their network. Guess some folks have to learn the hard way.

IAEA spokeswoman Gill Tudor told Reuters' Fredrik Dahl that the server the data was stolen from was "an old server that was shut down some time ago," and that the agency regretted the breach. "The IAEA's technical and security teams are continuing to analyze the situation and do everything possible to help ensure that no further information is vulnerable," Tudor said.

Then shouldn't countries be pushing Israel on inspections and verifications?

Instead of blackmail and quasi-legal manoeuvres into Iran's activities. Where they have a stated mandate of only peaceful power production? Where there is no good evidence to show they are after a bomb, despite popular belief. Where everything have done is completely legal, yet they are in a economic stranglehold? They are held to an unobtainable standard....yet Israel gets a free pass.

Then shouldn't countries be pushing Israel on inspections and verifications?

Instead of blackmail and quasi-legal manoeuvres into Iran's activities. Where they have a stated mandate of only peaceful power production? Where there is no good evidence to show they are after a bomb, despite popular belief. Where everything have done is completely legal, yet they are in a economic stranglehold? They are held to an unobtainable standard....yet Israel gets a free pass.

Makes sense right?

The point there is, Israel is under no treaty obligation regarding nuclear weapons. Oh, sure if the international community wanted, they could still sanction and press Israel. However, Israel is under no treaty obligations, nor would they be breaking international law if they did develop (well, I am sure they have) nuclear weaons.

Iran would be.

Also you are deluding yourself if Iran isn't actively trying to develop nuclear weapons. There is plenty of evidence that they are. Just not concrete "smoking gun" evidence. All that combined with Iran resisting almost tooth and nail any inspections and...well I think most [resonable] people can conclude that Iran is likely working to develop nuclear weapons. Which would violate the treaty they signed saying they wouldn't. That makes them a very bad boy at the very least. Considering likely uses Iran would have, a dangerous bad boy.

Yours is the popular perception, but look deeper into the information that is there. It is weak at best, near the same level of evidence that Bush had before he invaded Iraq. Hearsay and minor stuff, nothing even close or remotely close to something I would call evidence.

Iran has allowed inspections, just not some snap inspections of military facilities. Inspectors have inspected every part of their nuclear infrastructure and do so on a regular basis. They follow the guidelines of the non-proliferation treaty. Yet are punished relentlessly for something that is completely legal for them to do.

There has been no solid evidence of any nuclear weapons ambitions. They have denied it and asked other to show evidence they are.

So by your logic if Iran dropped out of the nuclear proliferation treaty and created their own bomb it should be fine with everyone?

Yours is the popular perception, but look deeper into the information that is there. It is weak at best, near the same level of evidence that Bush had before he invaded Iraq. Hearsay and minor stuff, nothing even close or remotely close to something I would call evidence.

I guess it really doesn't matter what someone else says, you would not be convinced until they said "surprise! we have a bomb"

No matter how you put it, a Government that feels the necessity to develop a nuclear power program which has the worlds second largest natrual gas and third largest oil reserves is fishy. A Government that hasn't learned any lesson out of Fukushima and is still trying to get into the action instead of trying to invest in something with future like solar power in a country with up to 300+ sun hours per month is strait dumb. A Government which has signed the non-proliferation treaty and doesn't allow an investigation by IAEA is really suspicious. That's a bunch of red flags right there without needing any intel.

And honestly, I wouldn't trust any Government which believes Religion is a good basis for it. As things stand, I'm not willing to take a chance on believing Iran is looking for a peaceful development, especially as Iran has refused any kind of compromise.

Iran has allowed inspections, just not some snap inspections of military facilities. Inspectors have inspected every part of their nuclear infrastructure and do so on a regular basis. They follow the guidelines of the non-proliferation treaty. Yet are punished relentlessly for something that is completely legal for them to do.

Nope. Iran hasn't allowed inspections. In fact it even kept the existence of some sites like Qom secret.

Also it has enriched uranium to levels far higher than needed by any of the peaceful purposes it claims to need them for, and has been found with polonium-210 which is used only for deep space exploration (which Iran doesn't do) and nuclear weapons.

Iran has allowed inspections, just not some snap inspections of military facilities. Inspectors have inspected every part of their nuclear infrastructure and do so on a regular basis. They follow the guidelines of the non-proliferation treaty. Yet are punished relentlessly for something that is completely legal for them to do.

Iran has allowed inspections, just not some snap inspections of military facilities. Inspectors have inspected every part of their nuclear infrastructure and do so on a regular basis. They follow the guidelines of the non-proliferation treaty. Yet are punished relentlessly for something that is completely legal for them to do.

really? Do you read your own links? This a link to the reports website. Did you read it? It shows exactly how many centrifuges they have, how many centrifuges are active and where, and how much both 5% and 20% uranium down to the tens of grams. But yeah they are so secretive those Iranians.

Iran has allowed inspections, just not some snap inspections of military facilities. Inspectors have inspected every part of their nuclear infrastructure and do so on a regular basis. They follow the guidelines of the non-proliferation treaty. Yet are punished relentlessly for something that is completely legal for them to do.

Nope. Iran hasn't allowed inspections. In fact it even kept the existence of some sites like Qom secret.

Also it has enriched uranium to levels far higher than needed by any of the peaceful purposes it claims to need them for, and has been found with polonium-210 which is used only for deep space exploration (which Iran doesn't do) and nuclear weapons.

Hmmm.....bet you didn't know that polonium-210 is found naturally in Uranium ore. Yeah please post something you know something about. Nuclear weapons? Really? It has a very short half life, hence why it is used for power sources and heaters, because it decays and makes heat so readily. To have a very large source of it in a weapon is bad, probably melt the housing if you weren't careful. It also has industrial uses for antistatic before painting. But oh no it's nuclear. It has little nuclear capability. But please do some research.

Iran has allowed inspections, just not some snap inspections of military facilities. Inspectors have inspected every part of their nuclear infrastructure and do so on a regular basis. They follow the guidelines of the non-proliferation treaty. Yet are punished relentlessly for something that is completely legal for them to do.

Nope. Iran hasn't allowed inspections. In fact it even kept the existence of some sites like Qom secret.

Also it has enriched uranium to levels far higher than needed by any of the peaceful purposes it claims to need them for, and has been found with polonium-210 which is used only for deep space exploration (which Iran doesn't do) and nuclear weapons.

Hmmm.....bet you didn't know that polonium-210 is found naturally in Uranium ore. Yeah please post something you know something about. Nuclear weapons? Really? It has a very short half life, hence why it is used for power sources and heaters, because it decays and makes heat so readily. To have a very large source of it in a weapon is bad, probably melt the housing if you weren't careful. It also has industrial uses for antistatic before painting. But oh no it's nuclear. It has little nuclear capability. But please do some research.

It's worth remembering that Iran has had its computer networks repeatedly compromised by a vareity of cyber warfare operations. After all the known cyber attacks, the western countries continue to insist that Iran is building a bomb.

This leaves us with three possible explanations:

1) Iran really is building a bomb.2) The cyber warfare efforts didn't work3) The cyber warfare efforts found nothing, and Iran is the victim of a conspiracy

Number two has basically been disproven. Number three is possible, but I think it is unlikely.

Yes, really. Polonium is a critical part of nuclear weapon initiators. The chain reaction requires a source of neutrons; the first initiator used involved mixing polonium and beryllium to create a neutron source. While other initiators may exist, Po/Be initiators are known to work and access to polonium is therefore considered to be an important part of a nuclear weapons program.

Just another notch in the belt of who can't be trusted to keep data confidential, no matter how old it is. Seem the UN IAEA would rather have availability over confidentiality and integrity, they succeeded. Also sounds like people in Iran would rather have the rest of the world focusing on something other than them. And what better way than to try to scare people to react differently.

Yours is the popular perception, but look deeper into the information that is there. It is weak at best, near the same level of evidence that Bush had before he invaded Iraq. Hearsay and minor stuff, nothing even close or remotely close to something I would call evidence.

I guess it really doesn't matter what someone else says, you would not be convinced until they said "surprise! we have a bomb"

No matter how you put it, a Government that feels the necessity to develop a nuclear power program which has the worlds second largest natrual gas and third largest oil reserves is fishy. A Government that hasn't learned any lesson out of Fukushima and is still trying to get into the action instead of trying to invest in something with future like solar power in a country with up to 300+ sun hours per month is strait dumb. A Government which has signed the non-proliferation treaty and doesn't allow an investigation by IAEA is really suspicious. That's a bunch of red flags right there without needing any intel.

And honestly, I wouldn't trust any Government which believes Religion is a good basis for it. As things stand, I'm not willing to take a chance on believing Iran is looking for a peaceful development, especially as Iran has refused any kind of compromise.

It's worth remembering that Iran has had its computer networks repeatedly compromised by a vareity of cyber warfare operations. After all the known cyber attacks, the western countries continue to insist that Iran is building a bomb.

This leaves us with three possible explanations:

1) Iran really is building a bomb.2) The cyber warfare efforts didn't work3) The cyber warfare efforts found nothing, and Iran is the victim of a conspiracy

Number two has basically been disproven. Number three is possible, but I think it is unlikely.

What is it you are setting up. That only these three are possible? Or that you have no clue what you are talking about.

If you say something please say something. Is it that the western world sent in cyber spies and found all kinds of stuff, but won't tell you? That they make all kind of innuendo but no hard evidence? You mean from all the computers in Iran being compromised they couldn't come up with anything?

What is the big deal if Iran wants nukes? Drop a few on them from stealth bombers.

Mydrrin wrote:

There has been no solid evidence of any nuclear weapons ambitions. They have denied it and asked other to show evidence they are.

If all they REALLY wanted was fuel for electricity they would be heros making their country better by taking the fuel rods offered by other countries. Instead they (the leaders) hurt the people of Iran with sanctions because they don't want to be given what they say they are trying to make.

Iran also shopped at the old A.Q. Khan network. A.Q. Khan built the Paki's A-bomb not a power plant. His network was dismantled (mostly) and the Paki's continue to protect and hide him from the IAEA and others who want to question what info he spread and to who?

Yes, really. Polonium is a critical part of nuclear weapon initiators. The chain reaction requires a source of neutrons; the first initiator used involved mixing polonium and beryllium to create a neutron source. While other initiators may exist, Po/Be initiators are known to work and access to polonium is therefore considered to be an important part of a nuclear weapons program.

They haven't been used since 1954. Yeah the first ones used these but have since been replaced by better initiators ones that are easy to use, and very low tech, and lasts forever (doesn't decay and make things hot).

To claim that they found some Polonium and therefore are making an initiator is pretty weak argument since the replacements are easy to manufacture and use, manufactured using every day technology.

To claim that the finding of Polonium is evidence of nuclear weapons is erroneous because it is naturally found in Uranium ore and doesn't need to be bred or made.

really? Do you read your own links? This a link to the reports website. Did you read it? It shows exactly how many centrifuges they have, how many centrifuges are active and where, and how much both 5% and 20% uranium down to the tens of grams. But yeah they are so secretive those Iranians.

So you take the Iranians admitting to small amounts as proof they don't have more? Wait until you are proved wrong by an Iranian nuke (or more than one) hitting Isreal and them laughing about it. If you don't see them as the modern Hitlers then you as as stupid as the USSR was for trusting him!

What is the big deal if Iran wants nukes? Drop a few on them from stealth bombers.

Mydrrin wrote:

There has been no solid evidence of any nuclear weapons ambitions. They have denied it and asked other to show evidence they are.

If all they REALLY wanted was fuel for electricity they would be heros making their country better by taking the fuel rods offered by other countries. Instead they (the leaders) hurt the people of Iran with sanctions because they don't want to be given what they say they are trying to make.

Iran also shopped at the old A.Q. Khan network. A.Q. Khan built the Paki's A-bomb not a power plant. His network was dismantled (mostly) and the Paki's continue to protect and hide him from the IAEA and others who want to question what info he spread and to who?

IAEA has said that there is no evidence that Iran has pursued nuclear weapons since 2003. There is outstanding questions that seem to always come up and if it is not this it is something else.

Iran has done everything themselves, notice they make their own tanks, their own aircraft, missiles, APC's, guns, they want to be leaders in the arab world and not followers. Nuclear power is one more thing, and lets face it, it is pretty compelling, constant always on power that is easily scalable is pretty darn sexy. Iran has little coal, NG is decent, and oil isn't that great for base power and you can get good cash for it. This will allow their industry to flourish without having to pay other people to use their stuff and be beholden to their whims for fuel, which is why they don't want to use fuel rods from other countries without a guarantee that they will not be withheld at any time for any reason. So they want to make it themselves from the Uranium deposits in their country. The NPT says "The treaty recognizes the inalienable right of sovereign states to use nuclear energy for peaceful purposes".

They haven't been used since 1954. Yeah the first ones used these but have since been replaced by better initiators ones that are easy to use, and very low tech, and lasts forever (doesn't decay and make things hot).

To claim that they found some Polonium and therefore are making an initiator is pretty weak argument since the replacements are easy to manufacture and use, manufactured using every day technology.

To claim that the finding of Polonium is evidence of nuclear weapons is erroneous because it is naturally found in Uranium ore and doesn't need to be bred or made.

The US stopped using them in 1954, NOT Iran. Does that mean what was a part of our rudimentary first steps can't be someone elses? They aren't trying to make the best and newest nukes, just ones that work. If I was building my first car from ZERO today do you think I'd try to top BMW or even Hyundai? No it'd be more like an early Ford!!!!!!!!!!!!!

really? Do you read your own links? This a link to the reports website. Did you read it? It shows exactly how many centrifuges they have, how many centrifuges are active and where, and how much both 5% and 20% uranium down to the tens of grams. But yeah they are so secretive those Iranians.

So you take the Iranians admitting to small amounts as proof they don't have more? Wait until you are proved wrong by an Iranian nuke (or more than one) hitting Isreal and them laughing about it. If you don't see them as the modern Hitlers then you as as stupid as the USSR was for trusting him!

Really, a Uranium "surprise" nuke? Untested would have what 50kt? Make a dent in a city. Then what would happen? Hell would rain down on Iran, from everyone, they would be the world's biggest target, pretty much eradicated from the planet, their people forced to not speak Farsi and the population spread exiled throughout the world. How long do you think they would laugh. It's a stupid idea - one that should be ridiculed.

Far easier to just use conventional to destroy the things they want. Far less pushback.

"So you take the Iranians admitting to small amounts as proof they don't have more?"

You see the difference? Iran is saying what they have. They are being inspected to what they have, it is all out in the daylight. There is no evidence of weapons. If you have any...I mean any evidence please speak up and don't make any more comments about Ruskies and Nazis, it's just bating and insulting.

IAEA has said that there is no evidence that Iran has pursued nuclear weapons since 2003. There is outstanding questions that seem to always come up and if it is not this it is something else.

Iran has done everything themselves, notice they make their own tanks, their own aircraft, missiles, APC's, guns, they want to be leaders in the arab world and not followers. Nuclear power is one more thing, and lets face it, it is pretty compelling, constant always on power that is easily scalable is pretty darn sexy. Iran has little coal, NG is decent, and oil isn't that great for base power and you can get good cash for it. This will allow their industry to flourish without having to pay other people to use their stuff and be beholden to their whims for fuel, which is why they don't want to use fuel rods from other countries without a guarantee that they will not be withheld at any time for any reason. So they want to make it themselves from the Uranium deposits in their country. The NPT says "The treaty recognizes the inalienable right of sovereign states to use nuclear energy for peaceful purposes".

Yes please do. Something that doesn't somehow equate a rudimentary table of energy relationships to nuclear weapons, something experts have dismissed the allegation, but somehow still gets repeated in the media. Or yeah when was Khan selling his wares? Was it before 2003? Yeah thank...please may I have another.

Sean Gallagher / Sean is Ars Technica's IT Editor. A former Navy officer, systems administrator, and network systems integrator with 20 years of IT journalism experience, he lives and works in Baltimore, Maryland.